Vulnerability Database

309,540

Total vulnerabilities in the database

CVE-2024-11922

Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an attacker with permission to trigger emails to insert arbitrary HTML or JavaScript into an email.

  • Published: Apr 28, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-11922
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
fortra / goanywhere_managed_file_transfer - 7.8.0